Cookies and browser storage

Version 2026-10-04 · Updated 2026-10-04

Version 2026-10-04 · Updated 2026-10-04

Requested functions

Storage for secure sign-in, its protection and expressly requested functions is technically necessary and has no voluntary consent toggle. Optional processing is explained separately and off by default. The listed names refer to the application; the separate Keycloak identity service has its own cookies.

Sign-in and security

next-auth.session-token holds the encrypted application session for at most eight hours after renewal. Under HTTPS its name uses __Secure- and may be split into numbered chunks. next-auth.callback-url stores the return destination; next-auth.csrf-token protects against forged authentication requests (__Host- under HTTPS). These two are session cookies. next-auth.pkce.code_verifier, next-auth.state and next-auth.nonce secure the sign-in exchange and expire after at most 15 minutes or are removed when consumed.

Selected language

immovaro-locale is written when you expressly change language. It remembers your selection for up to 365 days and is renewed on a new selection. It contains de or en and no financial data.

Calculator transfer

immovaro.calculator-handoff.v1 is stored in the current tab's sessionStorage when you expressly transfer inputs into a Deal. It contains only allowed input fields, is removed when consumed and ends with the tab session. Transfer through sign-in and legal confirmation does not itself create a saved Deal.

Identity service and changes

Keycloak is the self-hosted Immovaro identity service on the Contabo VPS. Its cookies support ongoing sign-in, sign-in status and protection of the sign-in exchange; their validity is tied to the relevant sign-in or authentication session. Sign-in may continue until you sign out of the identity service or its session expires. The application sets no advertising or third-party tracking cookies. Additional optional storage access is explained before use and requires separate consent where applicable.

Operator and controller

Denis Panic

Fuchshofstr. 45

71638 Ludwigsburg